spryker/product-quantity-storage

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. This is a minor transparency and process gap, not evidence of unsafe code.

Security policycaution

No repository security policy was found. That weakens the project's documented vulnerability-reporting process, though it does not outweigh the active, organization-backed maintenance evidence.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings, no untrusted checkout or script-injection paths, and no broad top-level write permissions. Two of four actions are unpinned, which is a minor reproducibility and supply-chain hygiene gap.